cloudsignal-webhooks

Pass

Audited by Gen Agent Trust Hub on Aug 2, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill author is Hookdeck, and the instruction s promote the use of hookdeck-cli for local testing. This is a standard developer tool for webhook development from a well-know n vendor.
  • [SAFE]: The webhook verification logic implements timing-safe comparison s (crypto.timingSafeEqual in Node.js and hmac.compare_digest in Python) to preven t timing attack s on the API key, which is a recommended sec urity practice.
  • [SAFE]: The skill advises storing sensitive API key s in environmen t variable s via .env files and provides .env.example files to guide user s safely.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 2, 2026, 08:01 PM
Security Audit — agent-trust-hub — cloudsignal-webhooks